EUVD-2026-82925

OpenCVE: Server-Side Request Forgery SSRF in notifications...

OpenCVE: Server-Side Request Forgery (SSRF) in notifications

Impact OpenCVE contains a Server-Side Request Forgery SSRF vulnerability in the notification testing functionality for both Webhook and Slack integrations. An authenticated user with permission to configure notification channels can trigger test requests to arbitrary HTTPS endpoints. Insufficient...

AIDOR

AIDOR 👁️ - Automated Insecure Direct Object Reference Detector AIDOR Automated IDOR Detector is a professional Bash utility for authorized penetration testers to identify Insecure Direct Object Reference IDOR vulnerabilities in web applications. Detects numerical IDs, parameter patterns, and...

LinkFinder

Acerca de LinkFinder LinkFinder es un script en Python diseñado para descubrir endpoints y sus parámetros en archivos JavaScript. De esta manera, los testers de penetración y cazadores de bugs pueden recopilar nuevos endpoints ocultos en los sitios web que están probando, obteniendo así nuevos...

SMTPTester

SMTPTester SMTPTester is a python3 tool to test SMTP server for 3 common vulnerabilities: Spoofing - The ability to send a mail on behalf of an internal user Relay - Using this SMTP server to send email to other address outside of the organization user enumeration - using the SMTP VRFY command to...

testing-handbook

Trail of Bits Testing Handbook The Trail of Bits Testing Handbook is a resource for developers and security professionals on configuring, optimizing, and automating many static and dynamic analysis tools we use at Trail of Bits. Preview Testing Handbook: https://appsec.guide 🌐 Why is this needed?...

distributed-system-testing

Distributed Systems Testing Skills Two skills for AI coding agents that design and run claim-driven tests for distributed and stateful systems. Together they produce a structured Markdown test plan and a findings report with 10-state verdicts and an explicit SUT / harness / checker / environment...

mcp-xray

MCP X-Ray Overview MCP X-Ray is a unified open-source security scanning and penetration testing solution for Model Context Protocol MCP servers. It generates production-ready SARIF reports for seamless integration with security tooling and CI/CD pipelines. Scan results can be optionally uploaded ...

PowerHuntShares

PowerHuntShares v2 PowerHuntShares es una herramienta de PowerShell diseñada para ayudar a los equipos de ciberseguridad y probadores de penetración a identificar, comprender, atacar y remediar mejor los recursos compartidos SMB en los entornos de Active Directory que protegen. Todo hacker tiene...

Protocol-Analyzer

Protocol Analyzer NetProtoFuzz Protocol-oriented fuzz testing framework for network protocols. Codacy Badge...

ReconCat

Recon Cat ========================================= Introducción Una pequeña aplicación PHP para obtener instantáneas de URL de archivo de archive.org. usándola puedes obtener una lista completa de URLs de instantáneas de cualquier año o la lista completa de todos los años posibles. Hecha...

airecon

AI-Powered Autonomous Penetration Testing Agent -orange.svg AIRecon is an autonomous penetration testing agent that combines a self-hosted Ollama LLM with a Kali Linux Docker sandbox , native Caido proxy integration , a structured RECON → ANALYSIS → EXPLOIT → REPORT pipeline , and a real-time...

MicroBurst

MicroBurst: A PowerShell Toolkit for Attacking Azure MicroBurst includes functions and scripts that support Azure Services discovery, weak configuration auditing, and post exploitation actions such as credential dumping. It is intended to be used during penetration tests where Azure is in use...

vuln-bank

Vulnerable Bank Application 🏦 A deliberately vulnerable web application for practicing application security testing of Web, APIs and LLMs, secure code review and implementing security in CI/CD pipelines. ⚠️ WARNING: This application is intentionally vulnerable and should only be used for...

jwtXploiter

jwtXploiter Una herramienta para probar la seguridad de los JSON Web Tokens. Prueba un JWT contra todos los CVEs conocidos; Manipula el payload del token: cambia los valores de claims y subclaims. Explota claims de cabecera vulnerables conocidos kid, jku, x5u Verifica un token Recupera la clave...

uro

uro Usar una lista de URLs para pruebas de seguridad puede ser tedioso, ya que hay muchas URLs con contenido poco interesante/duplicado; uro tiene como objetivo solucionar eso. No realiza ninguna solicitud http a las URLs y elimina: URLs incrementales, p. ej. /page/1/ y /page/2/ publicaciones de...

OSCP-Exam-Report-Template-Markdown

Plantilla de Informe de Examen de Seguridad Ofensiva en Markdown Creé una Plantilla de Informe de Examen de Seguridad Ofensiva en Markdown para que ya no necesites LaTeX, Microsoft Office Word o LibreOffice Writer durante tu examen de Offensive Security OSCP, OSWE, OSEE, OSWP, OSEP, OSED, OSWA,...

WAES

WAES - Web Auto Enum & Scanner Version 1.2.77 WAES is a professional-grade bash-based web enumeration and reconnaissance platform designed for Capture The Flag CTF competitions, Bug Bounty hunting, and Penetration Testing. It automates the complex workflow of security scanning by orchestrating...

JCS

JCS Joomla Component Scanner made for penetration testing purpose on Joomla CMS JCS can help you with the latest component vulnerablities and exploits. Database can update from several resources and a Crawler has been implemented to find components and component's link. This version supports...

CVE-2024-29269

Telesquare TLR-2005KSHRCE CVE-2024-29269 Batch scan/exploit 1.このツールはセキュリティテストのみに使用されており、違法な攻撃については責任を負いません. 2.The tool is only used for security testing, and I am not responsible for any illegal attacks. 3.工具仅用于安全测试，任何非法攻击本人概不负责. Help root@kitploit: / /\ //\ | \ / \ | || | | \ / \ \ / / / \ / /...